CVE-2022-2672

🗓️ 05 Aug 2022 11:40:28Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 61 Views🌐 WEB

Vulnerability in SourceCodester Garage Management System, critical SQL injection in createUser.ph

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-2672	5 Aug 202216:20	–	circl
CNNVD	SourceCodester Garage Management System SQL注入漏洞	5 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2672 SourceCodester Garage Management System createUser.php sql injection	5 Aug 202211:40	–	cvelist
EUVD	EUVD-2022-34917	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2672	5 Aug 202212:15	–	nvd
Prion	Sql injection	5 Aug 202212:15	–	prion
Positive Technologies	PT-2022-18025 · Sourcecodester · Sourcecodester Garage Management System	5 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2672	22 May 202522:35	–	redhatcve

NVD

Node

garage_management_system_project garage_management_systemMatch-

[
  {
    "product": "Garage Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
userName	request body	createUser.php	SQL injection via manipulated userName/uemail parameters in createUser.php	CWE-89
uemail	request body	createUser.php	SQL injection via manipulated userName/uemail parameters in createUser.php	CWE-89